Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
File:                     5b7d3556-28e1-360c-9a9e-a01bb7111857.roa (raw, json)
Hash identifier:          aN2GclDzQYMAax9oKSfmdnQFi9s6d6wdK1nC1oudcc0=
Subject key identifier:   D4:9E:EE:DE:98:23:1C:9A:58:87:5A:36:64:70:0F:23:4C:22:32:08
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584993F9E01160739F9C0F061180
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     23347
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e0:11:60:73:9f:9c:0f:06:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=dadd0581-9c6c-4318-a452-e2038569d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:3f:64:27:6a:06:08:bf:af:9b:0d:48:ae:
                    1b:3b:01:1a:ae:a9:7d:2d:d4:b5:3a:b7:c0:5e:8f:
                    80:47:06:25:30:01:b4:9a:9d:47:a4:dc:ee:a0:7a:
                    5a:ab:7b:20:04:29:75:c6:25:93:b5:42:aa:ee:71:
                    1f:51:fa:80:2f:ba:8b:d5:75:8d:12:47:8e:44:b5:
                    fe:d3:17:5d:f2:2c:9a:76:70:b5:ac:30:94:57:5d:
                    46:8e:b3:b0:8c:e3:ed:06:17:ce:6f:8a:51:c4:66:
                    a1:32:31:f8:1b:57:39:26:a1:06:9e:11:e2:49:34:
                    a7:b0:7c:b4:3c:22:75:e1:58:ad:8d:90:9c:92:86:
                    34:2e:76:a6:d0:a1:2e:77:e6:36:c4:63:9a:d5:e2:
                    87:36:35:ab:a4:18:de:62:0e:6a:3c:6c:ac:6b:a1:
                    5d:c5:bb:f3:2a:8d:24:b9:5f:b7:b5:c8:fa:29:25:
                    d4:34:6c:91:50:76:e2:4c:8d:99:f9:60:6d:9b:c6:
                    f7:bd:3f:4a:29:4f:73:33:ed:34:d2:f8:f4:02:bc:
                    e8:47:96:c8:f8:11:59:be:ff:a5:ac:05:98:3c:37:
                    c1:4c:d9:4e:cc:10:93:fc:5c:ce:55:bb:c7:23:a0:
                    63:32:d2:53:45:51:67:6f:e7:b3:11:e5:12:54:85:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:EE:DE:98:23:1C:9A:58:87:5A:36:64:70:0F:23:4C:22:32:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:2e:0d:ff:e2:02:2a:68:e4:f2:28:89:7d:14:5c:42:19:
         ed:2e:7d:ca:4f:76:00:09:b2:60:d5:15:d0:ee:2a:a7:67:61:
         c9:3c:35:20:a5:28:5d:1f:d1:ac:a0:27:16:4c:e2:57:61:4d:
         24:b2:89:fd:4e:90:df:f1:8f:a2:59:e1:e3:99:72:dc:26:a2:
         6b:3d:5a:80:76:77:38:9f:42:bd:ef:8a:f9:27:4d:75:9f:2e:
         f5:19:12:ae:71:8f:29:2c:35:cf:eb:13:01:96:5b:d7:ea:90:
         78:d8:67:68:8b:3e:b5:bd:74:32:44:fc:af:d3:82:38:07:d8:
         9f:ab:69:f8:cc:36:d0:d1:4b:b0:76:cd:ef:58:a4:f4:d2:ac:
         e8:8f:34:16:1f:a0:b5:92:cd:48:57:cb:b7:b8:27:eb:4f:3c:
         50:a9:ef:13:d9:b7:8e:81:ce:f8:ac:e2:8e:32:44:b8:04:34:
         11:d0:83:76:68:12:4c:e2:9f:e1:a3:ff:f1:1c:40:9a:7f:9c:
         bb:2e:0e:e9:f3:82:d5:6a:69:7a:16:96:11:ef:71:a3:cf:12:
         11:07:b4:5b:34:c3:62:36:bf:42:26:d9:4d:02:11:53:1b:24:
         68:0d:af:6e:aa:c3:2d:b7:10:dd:ab:d3:43:41:c7:9f:32:21:
         f1:c1:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:39:13 2025 by rpki-client